CVE-2017-13732
Fixed in a distro release EPSS 3%
There is an illegal address access in the function dump_uses() in progs/dump_entry.c in ncurses 6.0 that might lead to a remote denial of service attack.
Products: invisible-island ncurses
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.3 | ncurses | 6.0_p20170701-r0 |
| Alpine 3.4 | ncurses | 6.0_p20170701-r0 |
| Alpine 3.5 | ncurses | 6.0_p20170701-r0 |
| Alpine 3.6 | ncurses | 6.0_p20170930-r0 |
| Debian 12 | ncurses | 6.0+20170827-1 |
| Debian 13 | ncurses | 6.0+20170827-1 |
| Debian 14 | ncurses | 6.0+20170827-1 |
| SUSE Linux Enterprise Desktop 12 SP2 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Desktop 12 SP2 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Server 11 SP4 | ncurses | 5.6-93.12.1 |
| SUSE Linux Enterprise Server 12 SP2 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Server 12 SP2 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Server 12 SP3 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Server 12 SP3 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | ncurses | 5.6-93.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | ncurses | 5.6-93.12.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | ncurses | 5.9-55.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | ncurses | 5.9-58.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | ncurses | 5.9-55.1 |
| Ubuntu Pro 14.04 LTS | ncurses | 5.9+20140118-1ubuntu1+esm1 |
| Ubuntu Pro 16.04 LTS | ncurses | 6.0+20160213-1ubuntu1+esm1 |